Introduction to linear logic and ludics, Part I 



Pierre-Louis Curien (CNRS & Universite Paris VII) 
February 1, 2008 



Abstract 

In this two-part survey paper, we introduce linear logic and ludics, which were both introduced 
by Girard, in 1986 and 2001, respectively. They offer a thorough revisitation of mathematical logic 
from first principles, with inspiration from and applications to computer science. Some important 
keywords are: resources, geometry of computation, polarities, interaction, and games. 

Prerequisites 

We assume some basic knowledge of sequent calculus and natural deduction (see of A-calculus 

(the classical reference is 0, see also [23]), and of category theory (only in section see |25|). 

Warning 

This paper is not trying to survey the whole and impressive body of works on linear logic since 17 
years, but rather chooses a route that tries to highlight the deep originality of the subject. The 
bibliography is in consequence very partial (also reading the latter as a French word, wich meanss 
something like "personal", possibly biased). 

1 Introduction 

Linear logic arose from the semantic study of A-calculus, specifically, the second-order typed A-calculus, 
or system F (see US]). Shortly after proposing the first denotational model of system F Girard 
realized that in coherence spaces (to be introduced in section [7J the interpretation of type A — ► B 
decomposes naturally as (I A) — ° B (this will be detailed in sectional), and in almost no time a full- 
fledged new logic, with a totally innovative way of representing proofs and to execute them, that is, 
to perform cut-elimination, was created. We tell this story here, not in the order in which it unfolded, 
but starting from so-called substructural considerations. We raise the question of what happens 
when we remove some of the structural rules from sequent calculus, most importantly contraction. 
Substructural logics of various kinds have been considered much before the birth of linear logic, but 
what characterizes truly linear logic is not that aspect, but rather the controlled way in which the 
structural rules of weakening and contraction are reintroduced, by means of the new modality ! ("of 
course") (and its dual ? ("why not")). This, together with proof nets, constitutes the major break- 
through of linear logic. 

Let us consider the implication in the absence of contraction. In A-calculus, this corresponds 
to considering terms in which each variable occurs at most once. (Here we use the Curry-Howard 
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correspondence between proofs and programs, see Consider thus the set of affine A-terms built 

with the following constraints: x is an affine term, if M is an affine term then Xx.M is an affine term, 
and if M,N are affine terms with disjoint sets of free variables then MN is an affine term. The key 
fact about affine terms is the following: 



The reason is trivial: each /3-reduction reduces the size, keeping in mind that P\x «— Q] is the result 
of the substitution of at most one occurrence of x with Q, so P[x *— Q] is shorter by at least the 
two symbols of abstraction and application that have been absorbed by the reduction of (Xx.P)Q. Of 
course, this linearity is one of the reasons for the name Linear Logic. 

In contrast, arbitrary A-terms may take an exponential time and more to reach their normal form. 
For example, the reader may play with mn, where n = Xfx.f n (x) (Church numerals - here, f°(x) = x 



As another instance of the phenomenon of duplication, or of multiple use of a variable (or assump- 
tion), think of a constructive reading of (Vx 3 y x < y) from which one may wish to extract a program 
creating an infinite strictly increasing sequence of numbers. The program extracted from the formula 
will actually be a procedure to produce a y > x, when given an x, and it will be called in a loop. In 
linear logic, this formula would have to be written !(Vx 3y x < y). 

Rather than continuing a long introduction, we decide to enter in the subject proper, and we 
content ourselves with giving a plan of the sections to come. In section we introduce so-called 
multiplicative- addditive linear logic, and we complete the description of (propositional) linear logic 
with the exponentials in section [3J We shall not consider quantifiers in this survey paper, in any 
case, they look very much as usual. Then, in section^] we illustrate the expressivity of linear logic by 
sketching the proof that propositional linear logic is undecidable, a property that sharply distinguishes 
linear logic from classical and intuitionistic logics. The following three sections are concerned with 
the semantics of linear logic. We first discuss phase semantics, which is just a semantics of provability 
(section [SJ, then we introduce the coherence semantics, already alluded to (section 0, and finally we 
address the question of more general categorical definitions of models (section [TJ. 

In part II, we shall go back to syntactic issues and introduce proof nets. In particular, we shall 
address the so-called correctness criteria: proof nets are elegant representations of proofs avoiding 
some useless sequentializations imposed by sequent calculus. Reconstructing the sequentializations 
and thus asserting that a proof structure, that is, a would-be proof net, is actually a proof net, is a 
fascinating problem, that relates to games semantics [220]. The last sections (a polished form of [Sj) 
are devoted to ludics, which while strongly inspired by linear logic takes a more radical view of proofs 
as interactive processes, evolving in space and time. 

Here is a table of sources I have been using for writing this paper. The reader will be able to find 
more complete information and proofs by going to these references, as well as to the many others that 
he will find in their bibliographies or on the Web! 



Affine terms normalize in linear time. 



and f n+1 (x) = f(f n {x))). 



sections |2 and |3] 
section 0] 
sections [5] and [S] 



[141 1161 [U| (slightly revisited here in the light of ludics) 
|24j (a remarkably well-written paper) 

m 

[2~6] (which itself is a survey) 

[HE1E3E] 
H3 



section 
proof nets 
ludics 
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2 Multiplicatives and additives 



In sequent calculus, depending on presentations, you can see the left and right rules for, say, conjunc- 
tion given in this format: 

r,AhA r,shA rhA,A rhs,A 

T, A A B h A T,A A B h A T h A AB.A 

or in that format: 

r,A,B\-A t 1 ^a,a 1 r 2 hB,A 2 

r, A A £? h A ri,r 2 hAAB,Ai,A 2 

The two formats have been called additive and multiplicative, respectively, by Girard. We recall that 
a sequent F h A is made of two multisets of formulas (that is, we work modulo the so-called exchange 
rule which says that r h A entails any of its permutations - on the contrary, rejecting this rule leads 
to a complicated and still not very well- understood subject called non-commutative (linear) logic). 
The notation ri,r2 stands for the multiset union of Ti and T 2 - 

Logicians did not bother about these different presentations, because they are equivalent. Yes, but 
modulo the contraction and weakening rules: 

t,a,a^a t\-a,a,a r i- a tka 

T,AhA ThA,A r.ihA ThA,A 

Let us show this, say, for the left introduction rule. Let us first derive the multiplicative format from 
the additive one: 

Ti h A, Ai r 2 hB,A 2 



ri,r 2 hAAi,A 2 L 1; L 2 hB,A b A 2 
r x ,r 2 h AAB,Ai,A 2 

where the double line expresses multiple use of the weakening rules. For the converse direction we 
have: 

rhA,A rh5,A 

T, F h A A 5, A, A 



rhiAB,A 

using contractions. If we remove contraction and weakening, then the presentations are no longer 
equivalent and hence define different connectives, (8) and &, respectively called "tensor" and "with" . In- 
deed, you will see in section HJ that they are interpreted very differently. Moreover, the coherence space 
model (to which the curious reader may jump directly) enlightens the terminology multiplicative- 
additive, as the reader will check that the cardinal of (the interpretation of) A® B (resp. A&lB) is 
the product (resp. the sum) of the cardinals of (the interpretations of) A, B. 

Similarly, we split "disjunction" in two connectives, 1? and ©, respectively called "par" and "plus". 
As usual in sequent calculus, the left rule for, say, <g>, tells us by duality what the right rule for *g 
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is, and similarly for ffi. This leads us to the following monolateral sequent presentation of the four 
connectives: 



MULTIPLICATIVES 

hi,B,r i- a,Ti hB,r 2 



hA>$B,r \-A®B,T u r 2 



ADDITIVES 

h a,t hs,r hi,r hB,r 

Considered as (associative and commutative) operations, these four connectives have units "true" 
and "false" , each of them splits into the multiplicative and additive one: 

>S> ® © & 
_L 1 T 

(As for the terminology and for mnemotechnicity, the names 1 and correspond to the usual mul- 
tiplicative and additive notation in groups.) We shall synthesize the rules for the units from the 
requirement that the isomorphisms A ® 1 ~ A, etc., should hold. In order to prove hi®l,T from 
h A, r we should have h 1. In order to prove h A^±, T from h A, T, we should have h4,l,r as an 
intermediate step, which suggests the rule for _L given below. We derive h A © 0, T from h A, T by the 
(left) © rule, without any need for a (right) rule for 0. Finally, we need h T,T to derive h A&T,T 
from h A, V: 



hi hi 



\-A,±,r 



h i,r 



hAr hT,r 



hi»i 



hi&T,r 



The rules arc thus: 



UNITS 

h r 

hi h_L,T no rule for h T, T 

An even shorter way to synthesize the rules for the units is to formulate rules for n-ary versions of 
the four connectives, and then to take the degenerate case n = 0. The assumption of the n-ary *g 
rule is h A\, . . . , A n , T, which degenerates to h T. For the tensor rule there are n assumptions and 
the conclusion is h A\ ® . . . ® A n , T, with T = Ti, . . . , T„, and in the degenerate case we thus have no 
assumption and T = 0. There are n © rules, and thus no rule in the degenerate case. Finally, the & 
rule has n assumptions, and thus no assumption in the degenerate case. 

What about negation? In classical logic, negation can be boiled down to negation on atomic 
formulas only, thanks to De Morgan laws: -^(AAB) = (^A) V (^B), from which the other De Morgan 
law follows, using ^^A = A. This works also for linear logic, where negation is written A 1 - ("A 
orthogonal", or " A perp"). But the logical operations being different, negation in linear logic is very 
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different from that of classical logic. In classical logic, we have both A — -1—1A and h 4V -*A (the 
latter being what constructivists criticized), while in linear logic we have A = A ±J - and h A>$A ± , but 
we do not have h A ® A- 1 , and as a matter of fact linear logic retains the distinctive features that 
make intuitionistic logic so nice: confluence (of cut-elimination) , and the disjunction property (for ©, 
see below). 

Thanks to De Morgan laws, we can dispense with negation as a connective, and consider A 1 - as 
an abbreviation for its De Morgan normal form obtained by applying the following rules (where we 
have added the not-yet introduced "!" and "?" for completeness): 

(A ig) B) 1 - — > (A ± ) > %(B ± ) {A^B) 1 - -» (A- 1 ) ® (B- 1 ) I 1 - -» 1 1> -> 1 
(A&B) 1 - -> (A- 1 ) ffi (B-L) (AeB)- 1 -> (A- L )&(B- L ) T^O X ->T 
(IA) 1 - -^?(A- L ) (TA)- 1 ^I(A-L) 

(Notice that the dual under of a multiplicative (resp. additive) connective is a multiplicative (resp. 
additive) connective.) In the sequel, we shall freely use bilateral sequents in examples, but they can 
be seen as syntactic sugar for monolateral ones, for example Ay, A2 Y- B is a version of h A^,A 2 ,B. 
Hence, thanks to duality, linear logic puts all formulas of a sequent on the same ground, in contrast to 
intuitionistic logic, where there is a clear distinction between input (r) and output (A) in a sequent 

r h a. 

To complete the description of the multiplicative-additive fragment of linear logic, we need axioms, 
and the cut rule. The latter is not needed in the sense that it can be eliminated (just as in classical 
or intuitionisitc sequent calculus), but one can hardly use the system without cuts, which carry the 
intelligent part of proofs. 

AXIOM CUT 

I- A,T 1 hA\T 2 

y-a,a ± hri,r 2 

(Note that the cut rule is given in a multiplicative style, i.e., it is quite similar to the tensor rule. That 
the axiom has this most economical format, as opposed to h A, A ± , F, should come as no surprise, as 
the latter embodies an implicit weakening.) 

As explained in the introduction, the main motivation for the removal of (weakening and) contrac- 
tion is the control on normalisation. Indeed, the reader can easily check that all afhne A-terms can be 
typed by the following rules: 

I\ h M x : A -0 B r 2 h M 2 : A T,x: AY- M : B 

x : AY- x : A Yy, T 2 Y- MyM 2 : B T h Xx.M : A -0 B 

Notice the multiplicative style of the crucial typing rule for application. As usual, "A implies B" is 
"not A or B" , and specifically here A -o B = (A^^SB (—0 reads "linearly implies"). This natural 
deduction style rule is indeed encoded in sequent calculus using the (multiplicative) cut rule: 



T 2 Y-A \-B L ,B 
TyY-A^B T 2 Y-A(g>B ± ,B 
Ty,T 2 Y-B 
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This leads us to the main conceptual novelty of linear logic: the understanding of formulas as resources, 
that are consumed through entailment: in the sequent Ah- B, the resource A is consumed in order to 
get B (think also of a chemical reaction) . This is like in an abstract state machine, which changes state 
upon performing certain actions. As a matter of fact, we present an encoding of such a machine in 
section^] With this reading in mind, one easily understands how bad contraction and weakening are. 
Suppose that B is some good, and A is a given amount of money, say 20 Euros. Then A,A\-B reads 
as: "you can acquire B against 40 Euros". The contraction rule would say that you could acquire 
the same good for 20 Euros. Thus, contraction is not very good for the merchant. It is not good in 
chemistry either: in a reaction, in order to obtain 2H2O you need to have exactly four H + and two 
0~ 2 . Another way to criticize the rule is by looking from conclusion to antecedents (proof-search): if 
you only have A to get B, your resource A cannot be magically duplicated, as the contraction rule 
would imply. 

As for weakening, if you can buy B with A, as formalized by A h B, why would you - the buyer - 
spend an additional amount of money C to get B (C, A h B)l Weakening is not good for the client. 

So far, we have insisted on a dichotomy between additive and multiplicative connectives. There 
is however another grouping of connectives, that was sitting there from the beginning, and that has 
even been somehow made explicitly by the choice of symbols: © and © on one hand, and & and *8 
on the other hand. Girard noticed that © distributes over © (like in arithmetic!), and that dually 
1? distributes over &, while other thinkable combinations do not distribute upon each other (it is an 
instructive exercise to check this). Let us examine the proof of this distributivity law. We have to 
prove h (A © (B © C))-\ (A © B) © (A © C) and h ((A © B) © (A © C))- 1 , A © (B © C). Both proofs 
begin by decomposing the >8's and the &'s. For the first sequent, this goes as follows: 

h A ± ,B ± , {A © B) © (A © C) h A- 1 , C-S (A © B) © (A © C) 

h A x , (B ± kC ± ) 7 (A © B) © {A © C) 

h A ± ^(B ± kC ± ), (A © B) © {A © C) 

and we are left to prove the subgoals h A^, B x , (A © B) © {A © C) and h A x , C^, {A © B) © (A © C). 
Similarly, the search of a proof of the second sequent yields h A , B , ^4 © (B © C) and h A , C , A © 
(B © C) as subgoals. Before we proceed, note an important feature of & and in each of the two 
proof constructions, the two subgoals together are actually equivalent to the original goal: these two 
connectives are reversible - an affirmation that we shall make formal just below. In contrast, in order 
to complete the proof of any of the subgoals, we have to make (irreversible) decisions. We just give 
the proof of h A x , B 1 , (A © B) © (A © C), but the others are similar: 



h A x 1 B x , (A © B) 
h A ± ,B ± ,(A®B)®(A®C) 

The two decisions which we have made in this proof are: to choose the left © rule, and then to split 
A , B in the way we did, assigning the resource A 1 - for the proof of A and B for the proof of B. 



The opposition ©-© versus *8-&. is actually fundamental, and has played an important role in the 
genesis of ludics (see part II) . The following table summarizes its significance: 

© © ^ & 



Irreversible 
Non-deterministic 
Active 
Player 
External choice 
Positive 



Reversible 
Deterministic 
Passive 
Opponent 
Internal choice 
Negative 

We first show that the rules for *3 and & are reversible, that is, that the conclusions of the rules hold 
if and only if their antecedents hold, as follows: 



\-T,A>9B hA^B^,A,B h A&B, T h^©^,^ 

hr,A,s hA,r 

Hence we lose nothing by replacing h T, A^SB with h T,A,B in proof-search, and moreover we can 
gain something, since the liberated immediate subformulas A and B can then be sent to different 
antecedents when decomposing a tensor (as in the proof of h A>$B, A 1 - ® B ± ). The *8 and & rules 
are moreover deterministic in the sense that, once the formula to be decomposed in the sequent is 
fixed, then there is no choice on how to do it: for the *g rule, just dissolve the and for the & rule, 
prove the two subgoals, which are the same sequent up to the replacement of the formula by one of 
its immediate subformulas. As we shall see in part II, provided a certain proof-search discipline is 
respected, which can be phrased as "apply reversible rules in priority" , and if maximal groups of rules 
concerning reversible (resp. irreversible) connectives are grouped and considered as a single synthetic 
rule, then sequents always contain at most one formula whose topmost connective is reversible, and 
therefore even the choice of which formula of the sequent to decompose is deterministic. This absence 
of initiative can be termed passivity. 

Let us examine a contrario what makes the other connectives active and irreversible. We have 
already hinted at this when we proved the distributivity law. Each © rule, read bottom-up, chooses 
one of A or B, while each instance of the ©-rule makes a choice of how to split the (rest of the) sequent 
in two parts. The choice of which formula of the sequent to decompose is also non-deterministic. In 
other words, the two connectives are associated with some actions that must be taken. 

The next pair in our list places us in the tradition of the dialogue game interpretation of proofs, 
which goes back to Gentzen. A proof is the work of one person, the Player (think of a student), which 
another person, the Opponent (think of an examiner) can check. Checking goes by tests, or plays. The 
Opponent challenges the conclusion of the proof, to which the Player has to answer by displaying the 
last rule he used. The Opponent then chooses one of the antecedents of the rule, and challenges the 
Player to justify that particular antecedent, to which the Player answers by displaying the last rule 
used to show this antecedent, etc... The play results in disclosing, or exploring, a part of the proof. 
We shall come back to this game interpretation in part II. Here, we shall content ourselves with an 
illustration, Yves Lafont's menu: 
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Menu (price 17 Euros) 

Quiche or Salad 
Chicken or Fish 17 E h < 

Banana or "Surprise du Chef" 

(*) either " Profiteroles" or "Tarie Taftn" 



(QkS) 

® 

(CkF) 
(Bk(P®T)) 



We can recognize here some of the meanings that we already discussed. The right of the sequent is 
what you can get for 17 Euros. The tensor tells that for this price you get one "entree", one dish 
and one dessert. The difference between k and © is a bit more subtle, and the game interpretation 
is helpful here. So let us start again from the beginning, considering a play between the restaurant 
manager (the Player) and the customer (the Opponent). It is the Player's responsibility to split the 
17E into three parts, corresponding to the cost of the three parts of the meal. May be, this is done 
as follows: 

hE^QkS 8EhCkF AE h Bk(P®T) 



17E h (QkS) © (CkF) ® (Bk(P © T)) 
Now let the Opponent challenge 5E h QkS: 

5£ h Q 5£ h S 



5E h QkS 

which reads as: both Quiche and Salad are available to the customer, but he can get only one, and it is 
his choice of picking one of the antecedents and to order, say, a Quiche. Thus the additive conjunction 
can be understood as a ... disjunction embodying a notion of external choice (remember that in our 
example the customer is the Opponent, or the context, or the environment). Let us now analyse a 
proof of AE h Bk(P@T): 

AE h T 



AEV B AEV P © T 
AE h Bk(P®T) 

Suppose that the Opponent chooses the Surprise. Then it is the Player's turn, who justifies AE h P©T 
using the right © rule. So, the Opponent will get a Tarte Tatin, but the choice was in the Player's 
hands. Thus © has an associated meaning of internal choice. In summary, two forms of choice, 
external and internal, arc modelled by k and ©, respectively. In the case of ffi, whether A or B is 
chosen is controlled by the rule, that is, by the Player. In the case of k, the choice between A or B 
is a choice of one of the antecedents of the rule, and is in the hands of the Opponent. 

Actually, our image becomes even more acurate if we replace the customer with an inspector (in 
summer, many restaurants propose unreasonable prices to the tourists...). The inspector will not 
consume the whole menu, he will just check (his choice!) whether what is offered, say for the entree, is 
correct (not over-priced, fresh enough...). Another inspector, or the same inspector, may want to do 
another experiment later, checking this time on dessert: using this sharper personification, the game 
as explained above is more fully reflected. 

All these oppositions confirm a fundamental polarity: by convention, we shall term k and >$? as 
negative, and © and © as positive. 
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3 Full linear logic 



In order to recover the power of the full A-calculus (or of intuitionistic logic), we reintroduce the 
structural rules, but only on formulas marked with a modality (actually two: "!" and its dual "?"): 

h?A,?A,r hr 
h?A,r h?A,r 

The rules are easier to explain in a bilateral format. If you want to prove \A, T h B, then contraction 
allows you to give yourself the freedom of using the assumption \A twice, or more: if you have been 
able to prove \A, . . . ,\A,T h B, then you can conclude by using (repeated contractions). Similarly, 
weakening allows you to forget assumptions of the form \A: having a proof of T h B is enough to get 

w,rhB. 

The connective ! is a connective just as the others, and thus has its left and right introduction 
rules (?r denotes a multiset of formulas each of the form ? A) : 

Dereliction Promotion 

T,A HT,A 

hr,?A h?r,L4 

Our description of linear logic (LL) is now complete! The two connectives ! and ? are called the 
EXPONENTIALS. 

A variation on the promotion rule, which is inspired by categorical considerations (see section UJ, 
and also by considerations of the geometry of interaction (see part II) is: 

hr,A h??A,r 
h?r,!A h?A,r 

These two rules together are equivalent to the promotion rule. We just show here how the second rule 
can be derived: 

HA- 1 ,?/! 
h??A,r H\A ± ,?A 

h?A,r 

For intuitionistic or classical sequent calculus, the key result to establish in order to be able to make 
some use of it is the cut-elimination theorem. It holds here too, but we shall not prove it here (this 
is done in full detail, say, in the appendix of |24| ) . and we shall rather content ourselves with giving 
only a few cut-elimination rules, without conviction, since a much better representation of proofs - 
prof nets - will be given in part II. It is good that the reader see what he gains, though! 

n 



hi 1 ^ hA x ,r 

h a x ,t 



h a , r 
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n' 

n n / 

kt 2 ,b 



n n , 



hr!,?^- 1 h?r 2 ,is hri,?r 2 ,?r 2 



hri,?r 2 — hri,?r 2 

The second rule illustrates duplication of proofs, while the first one is the reinsuring one: cuts may 
vanish! 

***** AJOUTER DES REGLES COMMUTATIVES ***** 
We can now give a translation of (simply-typed) A-calculus: 

r, x : A h M : B T h M : A -> B T h N : A 



Y..r:.\ .r:.\ Th Xx.M : A B T h MN : B 

into LL proofs. This translation takes (a proof of) a judgement r h M : A and turns it into a proof 
[r h M : Aj of h?(r*)- L , A, where * applies to all formulas of T, (hereditarily) turning all B — > C"s 
into IB^C. Formally: 

A* = A (A atomic) (B -» C)* =1{B*)^C* liT*) 1 - = {^(A*) 1 - \ A e T} 

The reason why T \- A becomes h?r- L , A (or !r h A) should be clear: a variable can have several 
occurrences in a term, whence the need of a contraction rule to type it (using multiplicative and 
exponential connectives only). The translation is as follows (we omit the * for a better readability). 

Variable Abstraction 



A ± A [T,x : A\- M : B] 



[r, x : A h x : Aj = \-TT ± ,?A ± ,A [T h Xx.M : A -> Bj = HT- L ,(?A- L >9B) 
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Application 



h?r- L ,w hB 1 ^ 

h?r x , ?,4 X >S>B h?L x ,U ®B^,B 

h?r- L ,?r- L ,.B 
[r h MiV : S] = ktl^b 

Of course, this is not enough to declare that we have a satisfactory translation. The translation should 
be also computationally sound, in the sense that if M reduces to N, then the translation of M reduces 
to the translation of N. It is the case with this translation, but it is not so immediate to establish, as 
the translation does two things at the same time: it factors a translation from intuitionistic natural 
deduction (NJ) to intuitionistic sequent calculus (LJ) and a translation of LJ to LL. 

There are also other qualities that one may require of a translation: for example, that it should 
send cut-free proofs to cut-free proofs. Another (stronger) requirement is that the translation should 
respect the skeleton of the translated proof, that is, the translation contents itself with introducing 
some derelictions and promotions in the original proof. We refrain from going into this here. Let us 
just say that the (LJ to LL part of the) above translation does not respect these two requirements, but 
other "more verbose" ones (i.e., using more occurrences of the modalities) do. A thorough analysis of 
the translations of intuitionistic (and also classical) logic in linear logic can be found in ^3 (see 
also 0). 

We end the section with an important isomorphism: \(ASzB) = (IA) ® (IB) (from which the name 
exponential comes: think of ll e A+B = e A x e s "). We prove only one side and leave the other to the 
reader (of course, we are doing the same job as at the beginning of section |2J): 



hA^.A ^B^,B 
^1A^,A \-lB L ,B 
hlA^,lB^,A hlA^,lB^,B 
h?A^ L ,?B ± ,AkB 
HA ± ,?B ± ,\(AkB) 
\-?A ± ^'?B x ,\(AkB) 
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4 Proposition linear logic is undecidable 



We are interested in the decidability of the following problem: given F, is it decidable wether h L 
is provable? For MALL, this problem is decidable, as the possible cut-free proofs of a given sequent 
can be enumerated. This is because in a cut-free proof the formulas that can appear in the proof are 
subformulas of the formulas in the conclusion (this is the well-known subformula property), so there 
is a finite number of them, and moreover the absence of contraction guarantees that there are also 
finitely many possible sequents. Think of a proof of h F, A that would repeatedly apply contraction to 
A, thus searching h T, A, A, h V, A, A, A,. . . . This is not allowed in MALL (since the exponentials are 
omitted). But the complexity is high, and in fact the problem is NP-complete. We refer to 24 [Section 
2] for the instructive and pleasing proof, which relies on an encoding of quantified boolean formulas 
in MALL. 

What about full LL? It turns out that the Halting Problem for (a variant of) Two Counter 
Machines can be faithfully encoded in propositional linear logic, which entails the undecidability of 
the logic [Section 3]. (Note that this is in sharp contrast with classical propositional logic, for 
which decidability follows from the possibility of an exhaustive check of the truth values.) We next 
explain the encoding, and the structure of the proof of its faithfulness. 

A Two Counter Machine (TCM) is given by a set S of states, with two distinguished states qi and 
qF (the initial and final states, respectively) and by 5 sets of instructions Ii, I2, I3, I±, I5, where I\ 
through I4 are subsets of S x S and I5 is a subset of S x S x S. We use the following uscr-fricndlicr 
notation: 



+ A 




q t — > 


Qi 


— A 




qi — > 


Qi 


+ B 




q t — ► 


Qi 


— B 




qi — > 


Qi 


fork 




— > Qj 


Qk 



> for < 



(quQj) e l 3 
(<n,qj) e h 
(?i,5j,?fc) e h 



These instructions act on instantaneous descriptions (ID's), which are multisets s of triplets of the 
form (g, m, n) G S x u> x lo (uj being the set of natural numbers), as follows (where union is taken in 
the sense of multisets, e.g. {x, y} U {x} — {x, x, y}): 



+ A 



qj (<?i,m,n) e 



Qt qj ™>> n) € s m>0 



s \ {(qi,m,n)} U {(q 3 ,m + l,n)} s — > s \ {(%,m,n)} U {(qj,m - l,n)} 



qi — ° qj (qi,m,n) E s 
s \ {{qi,m,n}} U {(qj,m,n + 1)} 



i — ^ qj (qi,m,n) e s n > 
s\{(q i ,m,n)} U {(qj,m,n- 1)} 



fork 



q. } ,q k (qi,m,n)es 



s -f s \ {(qi,m, n)} U {{qj,m, n), (q k , m, n)} 



Note that the instructions —a and — b can only act on triplets of the form (q,m,n) with m > and 
n > 0, respectively. A triplet (q, m, n) formalizes a machine in state q whose two counters A and B 
hold values m > and n > 0, respectively. The last type of instructions is what makes these TCM's a 
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variant of the standard ones, which have instead two zero-test instructions for the two counters A, B, 
and which act on triplets (q,m,n), rather than on multisets of such triplets. The fork instruction 
necessitates these more complicated instantaneous descriptions, which formalize a cluster of machines 
working in parallel, one for each triplet, or local ID, of the multiset. A fork instruction executed by 
one of the machines M can be understood as launching a new TCM M' with initial local ID, say, 
(qk,m,n) while M evolves to local ID (qj,m,n). The counters are local to the machines, hence the 
counters of M' can later evolve differently from the counters of M. 

We are now ready for the encoding. States are encoded as (distinct) atomic formulas of the same 
name. Moreover, we pick two fresh distinct atomic formulas a and b, and we set a — 1, a 1 — a, and 
a n+1 = a n (g) a, and similarly for b. The fact that counter A holds value n will be encoded by the 
formula a n . We next encode rules as follows: 



+ A 

It — > Qj 



Qj 
Qj 
Qj 



Qi ' 

fork 

q t > qj,q k ) 



> for < 



<7j h qj <g> a 
g, ® ah qj 
qi r- qj <S> b 
q l ®bV- qj 

qi h q 3 © qk 



We have used bilateral sequents to help understanding: one reads, say, the first kind of rules as: 
"exchange qi for qj and for one more a" (incrementing the counter A). We shall soon see why © is 
the right connective to use for the fifth sort of rules. Formally, we interpret each rule as a formula, as 
follows: 

^Qjl =?((g^fe®a)) ± ) 

^Qjl =?(Gzi L s(<&®&))- L ) 



fork 



The reason for the ?((_)- L ) format is that we want to be able to use the encodings of rules as axioms, 
whenever needed, and hence possibly repetitively. We write H r for h ru[/J U [I 2 ] U [7 3 ] U [7 4 ] U {I 5 j. 



Proposition 4.1 Let M be a TCM, and s be an ID for M. Then M accepts from s, i.e., there exists 
a sequence of transitions s s' where s' consists only of identical triplets (qp, 0,0), if and only if, 
for every triplet (q, m, n) £ s, the sequent h' q 1 - , (a 1 ™)- 1 , (b n )^,qF is provable. 

Informally, the characterization in the statement reads as: assuming q<g> a m ®b n (the encoding of the 
triplet (q, m, n)) and all the rules as axioms, then qp is provable, for all triplets of s. Let us observe 
that M accepts from s if and only it accepts from each of the members of s, since each triplet of s' 
can be traced back to exactly one triplet of s, whence the "for all" form of the statement. 

Proof (indication). We first sketch the easy part of the proof, namely that accepting implies 
provable. The proof is by induction on the length of the reduction s s'. In the base case we have 
s = s', hence all the elements of s are (qp, 0, 0), and the conclusion holds by weakening of the axiom 
h qp,qp. So, let s — > si s' . If si = s \ {(qi, m, n)} U {(qj,m + 1, n)}, then all we are left to prove 
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is that h' g^, (a" 1 )^, O™)- 1 , g F , knowing that h' g4, (a m + 1 ) ± , g F . The proof is as follows: 

i h fe^fe ® a))- 1 , g^fe <g> a) 

h' «/, (a^J-L, (6")^, q F h?((q^( qj ® a)^), g^fo ® a) 



h' g/>S>a\ (a™) 1 , {b n )^,q F h?((^fe ® a)) x ), ^, © ® a 
H ?((^fe (g) a))^), gjL, (a™) 1 , (&»)\ q F 

(modulo the reversibility of >§>, and using the contraction rule at the end). We chek the case S\ = 
s \ {(q i} m, n)} U {(qj, m, n), {q kl m, n)} more informally, as follows: 



h qf, (a™) 1 , {b n )^,q F h g»J-, (a" 1 )^, (6")\ 9F 
^qfkqi,(a m )^,{VY,<lF 

^qt,{a™)^,{b n )^,q F 

Note that from a dialogue game point of view, the opponent of the proof has the choice of which 
triplet to check, either (qj,m,n) or (%,m, n), whence the presence of the external choice connective 
& in the encoding ?(% ® (qj-Szq^r)) of the fork rule. 

The converse direction (provable implies accepting) goes by analysing the cut-free proofs of the 
encodings of acceptation, and by showing that they are essentially unique and that one can read back 
an accepting sequence of transitions. □ 

Since given M and s it is undecidable whether M accepts from s, we conclude by reduction that 
LL is undecidable. 

Exercise 4.2 Formalize the proof of decidability of MALL outlined above. Hints: (1) associate with 
each sequent h A a complexity measure c(h A) such that for each instance of a MALL rule 

antecedent 1 ... antecedent n 

conclusion 

we have c(antecedent i) < c(conclusion) for all i; (2) then show that the set of "possible proofs" of a 
sequent (i.e. the trees whose internal nodes correspond to correct application of the rules of MALL 
and whose leaves are sequents T where T consists of atomic formulas only) can be effectively generated; 
(3) then show that one can effectively check which among these "possible proofs" are real proofs (look 
at the leaves). 



h qt,Qj®Qk 
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5 Phase semantics 



Phase semantics is a semantics of provability. Like in Kripke models for modal logics or intuitionisitic 
logic, a formula is not true or false, we rather have ways to express the extent to which it is true. In 
Kripke semantics, the meaning of a formula is the set of so-called worlds at which it holds. In phase 
semantics, a similar, but more structured, notion of phases is used. Formulas are interpreted by facts, 
which are well-behaved sets of phases. 

When setting up a notion of model, one has in mind both soundness and completeness of the 
class of models to be defined. This class must be large enough to include most natural examples of 
candidate models, and in particular it must contain the candidate syntactic model which will serve 
to prove completeness. As a guide to the understanding of the notion of phase space, we expose first 
what this syntactic model looks like. Its phases are just sequences of formulas. The intention is that 
the interpretation of a formula A in this model is the set of all T's such that h F, A. The soundness 
theorem will have the following form: if h A, then A is valid, in the following sense: the special phase 
1 (think of it as expressing the certitude that A holds) belongs to the interpretation of A. In the 
syntactic model, 1 will be the empty sequence of formulas. Thus, in this model, the validity of A 
is exactly the provability of h $,A, i.e., of h A. With these preparations, we can now define phase 
spaces. We deal with MALL first. 

Definition 5.1 A phase space is a pair (P, _L) where P is a commutative monoid (in multiplicative 
notation: pq, 1 ) and L C M is a distinguished subset of antiphases. One defines the following 
operation on subsets of P: X 1 - = {q | Vp G X pq G _L}. 

It may be useful to think of the g's as observers of the elements of X and of pq G _L as a form of 
agreement between the observer q and the observed p (somehow, a degenerated form of the kind of 
dialogue described in section We may say that "p passes the test q" when pq G _L. A fact is a 
subset F C P such that F ±J - = F. 

The following properties are easy to check, and the reader must have seen them somewhere already 
(linear algebra!): 

X C Y => Y 1 - C X x 

X c x- 11 - 
x ± = x xxl - 

F is a fact if and only if F = X for some X 

(lur) 1 =i 1 ny 1 

Thus a fact is a set of elements that pass the same tests, an idea which will be re-used in the richer 
setting of ludics. Notice also that facts obey F = F, so that - 1 is suitable for interpreting the linear 
negation, provided all formulas are interpreted by facts. Notice also that _L = {1} , hence _L is a fact, 
which we use to interpret the constant _!_. Also, P = is a fact. 

We now define the various connectives as operations on facts. We write XY = {pq p G X, q G Y}. 

F ® G = (FG) ±J - T = 9 ± FkG = F nG . 
The rest can be deduced by duality: 

F*gG = (F ± G ± ) ± F ®G — (F U G) ±A - = P J - 1 = ± x 
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(recall that _!_ is interpreted by _L). This determines the interpretation of formulas, provided we have 
assigned facts to atomic formulas. We freely say that A is interpreted by A, and if T = A\,.. . ,A n , 
we also write freely T for (the interpretation of) A\^ ■ ■ ^A n . The soundness theorem is stated as 
follows: 

Proposition 5.2 For any interpretation in a phase space, if\- A±, . . . , A n , then 1 G A±^ . . .^An (we 
say that A\, . . . , A n is valid). 

Proof. We just check the case of _L. Suppose 1 e T. We have to show that 1 G (r^T^)- 1 , i.e., that 
T^i- 1 C _L. Let p G r and q G J_ . Since 1 G T, we have p£l, and since q G _L , we have pq G -L. 
□ 

The following is a less symmetric, but more intuitive characterization of the notion of validity. 

Lemma 5.3 For any T = A\, . . . , A n , and any 1 < i < n, T is valid if and only if (the interpretation 
of) Af- is included in (the interpretation of) A\^ . . .>%Ai-i > $Ai + i y 8 . . .^A n . 

Proof. For simplicity, we take n = 2, and we set A^~ — A and A2 — B. We have: 

1 G {A^B^) 1 - A^B 1 - C _L A^ 1 - C B ±A - ^AQB. 

□ 

Hence, if A w B, i.e., if A h B and B h A, then A and B are interpreted by the same fact. 

In particular, we have that F*8{G&H) = (F r 8G)k(F r gH), for arbitrary facts F,G,H. (take the 
formulas P*8(Q&R) and (P^Q)k,{P > SR), with P,Q,R atomic and interpreted by F,G,H, respec- 
tively). As an exercise, we provide below an ad hoc proof of this equality, which makes use of the 
following property. 

Lemma 5.4 Let X,Y C P. The following inclusion holds: X ±J -Y ±J - C 

Proof. We have to show that pqr G _L for any p G X ±J -, q G Y^ 1 - and r G (XY) . Taking some 
/ G X, we get that rf G Y^, hence q{rf) — (rq)f G _L Since this was for arbitrary / G X, we get 
rq G X , and p(rq) — pqr 6i. □ 

We have to prove L — (F J -(GnH) J -) ± = (F ± G ± ) ± r\(F J -H J -) ± . The right hand side can be rewritten 
as follows: 

{F- L G X ) X n (F-t-H- 1 ) 1 - = (F ± G ± U F^H^) 1 - = (F X (G X U H x )) x = R . 

Then we observe that GnH C G entails (GnH) 1 - D G x . We have (GnH) 1 - D H x , similarly. Hence 
F X (G n H) x D F X (G X U H x ), from which L C R follows. For the converse direction, we exploit the 
information that F, G, H are facts, i.e., that F = X , G = Y , and H = Z 1 - for some subsets X, Y, Z 
of P. We have then, using lemma 15^1 

L = (X XX (Y X n z x ) x ) x = (^((ruz) 11 ) 1 

D (I(FUZ)) 111 

= (i(yuz)) 1 

D (X XX (Y XX U Z xx )) x = R . 

We now define the syntactic model. As announced, P is the set of the r = A\ . . .A n 's (up to 
the order of the formulas), written by juxtaposition (the monoid is given by concatenation), and 

± = {r|hr}. 
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Proposition 5.5 Phase spaces form a complete class of models, i.e., if a MALL formula A is valid 
in all phase spaces, then h A. 

Proof. One shows by induction that the interpretation of A in the syntactic model is {T | h r,A}, 
and we conclude then as indicated at the beginning of the section. Let us call Pr(A) the latter set. 
For atomic formulas, we just fix the intepretation of A to be Pr{A), but to this aim we must first 
verify that Pr{A) is a fact, which we prove for an arbitrary formula A. We have to show that if 
A £ Pr(A) ±J -, then h A, A. It follows easily from the fact that A £ Pr(A) 1 - . We check only that 
Pr(A ® B) C (Pr(A)Pr(B)) ±± . Let X = Pr(A)Pr{B) = ^{£2 | h A,Ti and h B, T 2 }. We have to 
prove that if A e X ± , then, for all T, h A ® B,T entails h T, A. We notice that A ± B ± £ X since 
hA 1 ,Aandh B^,B. Hence hi^B^A, and: 

h r, A 

□ 

We next give the phase semantics of exponentials. Like for intuitionistic logic, topological ideas 
are useful. In the case of intuitionistic logic, in order to avoid the tautology (A or -<A), one interprets, 
say, -1 A by the interior of the complement of A in some topology. In the case of linear logic, we still 
have to choose the right infinite conjunction and the finite disjunction used to define the "closed" sets. 

Definition 5.6 A topolincar space is a structure (P, _L, F), where (P, _L) is a phase space, and where 
F is a set of facts that satisfies the following conditions: 

(1) F is closed by arbitrary intersections, 

(2) F is closed by (finite) f?, and (in particular) _L £ F, 

(3) _L is the smallest fact o/F, 

(4) F*8F £ F, for all F £ F. 

The facts of F are called the closed facts. Given a fact F , we define IF as the smallest closed fact 
containing F. 

Notice that, defining the open facts as the orthogonals of closed facts, we get a definition of IF as the 
largest open fact contained in F. 

The soundness theorem extends to full LL. For weakening, we proceed exactly as for the _L rule, 
using _!_ CP. A. The validity of contraction is an obvious consequence of axiom (4). Using lemmaE3 
the validity of dereliction and of promotion are immediate consequences of the axioms (3) and (2), 
respectively. 

We extend the definition of the syntactic model as follows. We take as closed facts arbitrary 
intersections of sets of the form Pr(lA). Let us verify that this collection is closed under finite >g"s. 
We have proved F*8(G&,H) — (F*8G)8z(F*8H) above. The infinitary version of this equality is proved 
in the same way, so that we get 

(n. ie/ PK?^Ma e ,/^(?^)) = [\ ieI , jeJ {Pr{lA^Pr{lB )) 
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where the last equality follows from ?(Ai)>8?(Bj) ~7{Ai © Bj). Also, _L is a closed fact since _L « ?0, 
and it is the smallest one, by the weakening rule. Axiom (4) is the consequence of two observations: 

(t) lA^lA^lA (\) lAi h?Ai, ?Aj . 

(t) follows from A h A © A (by either of the © rules) and from h A^SzA^, A), and (J) is immediate 
by weakening. Then we have: 

(n ie/ pr(?^))i?(n jeJ iM?^-)) - n. ie / je ,/(^(?^)^^(?^)) 

= ^{PrpA^PrilAi)) by (J) 
= a e /^(?^) by(f) 

Thus the syntactic structure is a topolinear space. 

We have to prove that Pr{lA) = f){Pr(?B) \ Pr(A) C Pr(?B)}. Since Pr(A) C fY(?A) by 
dereliction, we have one inclusion. For the other, we have to show that if Pr(A) C Pr(lB) then 
Pr(?A) C Pr{lB). So let h r,?A Since fV(A) C Pr(?B), then in particular h AX IB, hence 
h!A x ,?S by promotion. We conclude that T S Pr(lB) by using the cut rule. This completes the 
proof of completeness. 

6 Coherence spaces 

With coherence spaces, we give a semantics of proofs. Coherence spaces may be understood as 
concrete descriptions of certain sets or domains, in the terminology of denotational semantics. They 
are a simplified version of event structures . 

Definition 6.1 A coherence space {E, X) (E for short) is given by a set E of events, or tokens, and 
by a binary reflexive and symmetric relation X over E. E is called the web of (E, X)- A state, or 
clique, of E is a set x of tokens satisfying the following consistency condition: 

Vei, e 2 G x ei C e 2- 

We denote with D(E) the set of states of E, ordered by inclusion. If (E, X) is a coherence space, its 
incoherence is the relation defined by: 

ei X e 2 -<(ei X <X or e\ = e 2 . 

Notice that the incoherence is not the complement of the coherence, since the coherence and the 
incoherence are both reflexive. We also define strict incoherence and strict coherence as follows, 
respectively: 

ex — - e 2 4^ ->(ei X e 2 ) e\ ^ e 2 <S=> ->(ei X e 2 ) 

Clearly, coherence can be recovered from incoherence: 

ei C 62 O ->(ei X e 2 ) or e-y = e 2 . 

In fact, it is easy to check that all the relations X, X, ^ an d ^ are interdefinable, that is, if one of 
them is given, then the other three can be defined from it. 
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We illustrate coherence spaces with a few ewamplcs. The coherence space Nat=(w, G) 5 where 
m O n if and only if m = n is such that D(Nat) = {0} U {{n} new}, that is, D(Nat) is isomorphic 
to the partial order (l}Uu, ordered by the flat ordering x < y if and only if x = _L or x = y. This 
partial order is used in denotational semantics to interpret the type of natural numbers. 

We next show how to interpret the connectives of linear logic as constructions of coherence spaces. 

Definition 6.2 The product, or "with", E$zE' of two coherence spaces E and E' is the coherence 
space whose tokens are either e.l, with e G E, or e'.2, with e' G E' (using an explicit notation for 
disjoint unions), and the coherence is given by: 

(eii) C (e 2 -j) t^i^J or (* = 3 and e i C e 2 ). 

This definition is such that D(E&,E') is isomorphic to D{E) x D(E'), where x is the good old 
set-theoretical cartesian product. For example, taking E = E' = Nat, we have that (_L,_L), (to, _L), 
(_L,n), and (m, n) are represented as 0, {m.l}, {n.2}, and {TO.l,n.2}, respectively. 

Definition 6.3 The tensor product E ® E' of two coherence spaces E and E' is the coherence space 
whose tokens are pairs (e, e') where e G E and e' G E' , and whose coherence is given by: 

(ei, ei) G (e 2 , e' 2 ) (e 1 C e 2 and e\ C e' 2 ). 

We next introduce the duality, or linear negation. 

Definition 6.4 The linear negation E of a coherence space (E, X) is defined as E = (E, X)- 

The definition of the interpretation of *3 and — o (and also of © - left to the reader) is then obtained 
by De Morgan duality. 

Definition 6.5 Let E, E' be coherence spaces. Their "par" E*gE' is the coherence space whose tokens 
are pairs (e, e') where e G E and e' G E' , and whose incoherence is given by: 

(ei, ei) X (e2, e' 2 ) (ei X e 2 and e[ X e' 2 ). 

Definition 6.6 Let E, E' be coherence spaces. Their linear implication E E' is the coherence 
space whose tokens are pairs (e, e') where e G E and e' G E' , and whose incoherence is given by: 

(ei, ei) X (e 2 , e' 2 ) (ei C e 2 and e[ X e' 2 ). 

Exercise 6.7 Show that the following are other equivalent definitions of the coherence of the linear 
function space: 

(1) (ei, ei) C (e 2 , e' 2 ) <^> (ei C e 2 =^> (ei C e' 2 and (ei ^ e 2 =^> e[ ^ e 2 ))) 

(2) (ei, ei) C (e 2 , e' 2 ) ^ (ei C e 2 ei C e' 2 ) and (ei X e 2 e x X e 2 ) . 

Definition 6.8 Let (E, X) &e a coherence space. The exponential \E is the coherence space whose 
tokens are the finite cliques of E, and whose coherence is given by (x\ 3 x 2 <^4> x\ | x 2 ) ; where x\ \ x 2 
means that there exists a clique x of E such that X\ C x and x 2 C x. 

Now we explain briefly the interpretation of LL in coherence spaces. 
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1. A formula A is interpreted by a coherence space (it does not harm to use the same name, as we 
did already for phase semantics). 

2. A proof 7r of a sequent h A\, . . . , A n is interpreted as a clique {it} of Ai>$ . . ^A n . 

3. If 7r rewrites through cut-elimination to n', then [7r] = [7r'J. 

As an example, we show (2) for the cut rule. We first remark that a token of Ai*g . . .*8A n is a vector 
e = (e 1; . . . , e„), and that (cf. the definition of ? S > ) we have 

(|) e -—- / if and only if a fi for some i . 

Let 7Ti be a proof of h L, A and 7T2 be a proof of h T', A- 1 , and let 7r be the proof of h T, L' resulting 
from applying the cut rule. We define the interpretation of ir as follows (relation composition!): 

[tt] - {(e,e') | 3a (e,a) e [tti] and (e',o) G [tt 2 ]} . 

We have to show that [7r] is a clique. Let (e, e'), (/,/') € [7r]. Then there exist a and 6 such that 
(e, a) G [7Ti],(e',a) G [7r 2 ], (/, 6) £ [7Ti], and (/',6) G [7r 2 ]. So, because we know by induction that 
[7Ti] and [7r 2 ] are cliques, we have (e, a) G (/, b) an d (e',a) 3 (f',b). If both (e, a) = (/,&) and 
(e', a) = (/', 6), then we have also (e, e') = (/, /') and a fortiori (e, e') G (/, f), so we are done. Let 
us suppose thus that, say, (e, a) <~-> (/, b). By property (f), there are two cases: cither wc have ^ /» 
for some i, or a b (the subscript A means that is relative to A). In the first case, we have 
directly that (e, e') ^ (/, /'), using (f). In the second case, we know that a ^ b (by the definition of 
-~-), so a fortiori we have (e', a) ^ (/', b). Hence, by (f), either there exists i' such that e-, f-,, and 
then we conclude as above, or a ^a 1 - b. But this cannot happen, because we have a -~m b, hence a 
fortiori a 3 A 6, which can be rephrased as a ~X. A ± b and in turn can be rephrased as -i(a ^■a ± b)- 
This ends the proof. 

But there is more to this semantics. Coherence spaces can be organized in a category, actually 
two categories: the category of stable functions (this is where it all started), and the category of 
linear functions. The domains D(E) are closed under union of increasing sequences, that is, they are 
complete partial orders. It remains to find appropriate morphisms between coherence spaces, defined 
as appropriate functions from cliques to cliques. 

Definition 6.9 Let (E, 3) an d {E' , 3) be two coherence spaces. A monotonous function f : D{E) — > 
D(E') is called stable if it is continuous, i.e., f(\J neoJ x n ) — {J neoJ f(x n ) for every increasing sequence 
x n , and if it preserves compatible intersections, i.e.: 

Vx,y x t y => f{x Dy) = f{x) n f(y) 

(notice that if x f y, then x Dy is a clique). If moreover f preserves compatible unions, i.e.: 

Vx,y x]y^ f{x Uy) = fix) U f(y) 

then f is called linear. Stable functions are ordered by the stable ordering < s; defined as follows: 
/ < s j i/ and only if (Vx G D{E) fix) < <?(x)) (pointwise ordering) and 

Vx < y f{x)=g(x)nf(y) . 
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Proposition 6.10 For all {E, 3)> (E'> 3)> (Coh[-E, -B'], < s ) (^/ie partial order of stable functions) 
is order-isomorphic to (DQ.E — ° E'), C). 

Proof (indication). The inverse bijections are defined as follows. Given a stable function / we 
define its trace, and given a clique <fr of \E — o E' we define the inverse transformation as follows, 
respectively: 

trace(f) = {(x,e') \ e' 6 f(x) and (Vy < x e' & f(y))} 
fun{4>){z) = {e 1 \ 3x x < z and (x,e') S 0} . 

The most interesting part of the proof consists in verifying that trace(f) is a clique, and that the 
stable ordering is just the inclusion of traces. One uses the following characterization of the coherence 
relation of IE — o E' (cf. exercise l6.7|) : 

(xi, e[) C (x2, e' 2 ) (xi C x 2 =4* (e[ C e 2 and (e[ = e' 2 xi = x 2 ))) ■ 

The trace has an operational flavour: one can read (x,e') € trace(f) and i < z as: "a; is £/ie (finite) 
part of z which is used to compute the output event e' £ f(z)". Indeed, x is unique with that 
property, by the above characterization of the coherence, and is called the minimum point for y and 
e' The stable ordering now also has an operational flavour: if / < s <?, then "/ and g are computed 
in the same way" in the sense that g has to respect the minimum points of /. We show that / < s g 
implies trace(f) C trace(g). Let (x, e') £ trace(f). Then e' £ f(x) C g(x), and hence there exists 
(y, e') £ trace(g) such that y < x. We show that y = x, which will establish the inclusion. Suppose 
z < x. Then we would have e' £ f(y) = f(x) D g(y), which contradicts the minimality of x. The 
converse implication is proved similarly. □ 

This proposition has a capital historical importance: it is the observation of the quasi-symmetry 
of input and output in the traces of stable functions which lead Girard to force a complete symmetry 
by deciding that finite cliques can be considered as atoms, or events of a new coherence space, and 
hence by decomposing E — > E' as \E —° E' . 

Exercise 6.11 Show that for all (E,^,), (i?',0); (Coh\[E,E'],< s ) (the partial order of linear func- 
tions) is order-isomorphic to (D(E — ° E'), C). 

7 Categorical models 

In this section, we describe a general categorical semantics for linear logic, and we introduce the 
appropriate categorical apparatus. We assume that the reader knows about categories, functors, 
natural transformations, and adjunctions. We briefly reintroduce other rather standard notions such 
as monoidal categories and comonads, as well as more ad hoc notions and axioms that are needed to 
complete the picture. 

Definition 7.1 A monoidal category is a category C equipped with a functor ® : C x C -> C, called 
the tensor product, a distinguished object 1, called the tensor unit, and natural isomorphisms, also 
called the canonical isomorphisms: 

a: A®(B®C) -> (A®B)®C i% : 1 ® A — ► A i r : A®\^ A , 

satisfying the following two so-called coherence equations: 

(a — a) aoa = (ag id) o a o (id (g> a) (a — i) (b r ® id) o a — id ® i\ . 
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Where do the two coherence equations come from? As observed by Huct (unpublished), a good 
answer comes from rewriting theory (a subject that did not exist as such when monoidal categories 
were defined by Mac Lane in the early sixties) . Consider the domains and codomains of the canonical 
isomorphisms as the left and right hand sides of rewriting rules and rewriting sequences, respectively: 

(a) A® (B ®C) -> (A® B) ®C (n) 1 A -> A (t r ) A®1^A 

The two coherence equations correspond to equating different reduction sequences: a o a encodes 

A ® {B (C ® D)) -> {A B) ® (C ® D) -> {{A S) C) £> , 

while (a id) o a o (id ® a) encodes 

i4 (5 (C D)) -> A ® ((B C) £>) ^* ((A B) C) ® D . 

Similarly, the two sides of the second equation encode 

A®(\®B)^(A®\)®B^A®B 
A®{\® B) -> A® B . 

These pairs of derivations form local confluence diagrams for the rewriting system on objects induced 
by {a), (ti), and (t r ). We pursue this interpretation in exercise 17.21 which assumes basic familiarity 
with rewriting theory. 

Exercise 7.2 (1) Find all the critical pairs of the rewriting system on objects underlying a, i/, and l t , 
and show that the corresponding equations between canonical isomorphisms are derivable from the two 
equations given in definition \ 7. 1\ Hint: There are three other critical pairs; exploit the fact that 
a,ii, and i r are isos. (2) Prove the so-called coherence theorem for monoidal categories: every two 
canonical morphisms (that is, terms over the signature {o, id, ®, a, a -1 , u, , i r , i^ 1 }) with the 
same domain and codomain are equal. Hint: Remove first a~^,Lj , and l~ x , and proceed as in the 
proof of Knuth-Bendix theorem ( confluence of critical pairs implies local confluence ) }21f . 

Definition 7.3 A symmetric monoidal category is a monoidal category together with an additional 
canonical isomorphism "f:A®B—>-B®A satisfying: 

(7 — 7) 707 = id 

(a — 7) 0070a = (7 ® id) o a o (id ® 7) . 

The coherence theorem still holds in the symmetric monoidal case, but needs more care: clearly we 
do not want to identify j : A ® A — > A ® A and id : A ® A — > A ® A. Category theorists exclude 
this by speaking, not of terms, but of natural transformations: in the present case, we see that 
7 : (X(A, B).A <g> B) -> (X(A, B).B ® A) and id : (X(A, B).A ® B) ^ (X(A, B).A ® B) do not have the 
same codomain. A more elementary point of view is to restrict attention to linear terms for objects. 

Exercise 7.4 Show that, in a symmetric monoidal category, any two canonical natural transforma- 
tions between the same functors are equal. Hints: Use monoidal coherence, and the following presen- 
tation of the symmetric group by means of the transpositions cr, which permute two successive elements 
i and i + 1 : 

<7,; o Ui — id o~i o o~j = o~j o o~i (j — i > 1) o~i o <7j_j_x o <7j = 0^+1 o <7j o Cj+i . 
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Definition 7.5 A monoidal closed category is a monoidal category C such that for all A the functor 
XC.(C ® A) has a right adjoint, written XB.(A —°B). In other words, for every objects A,B, there 
exists an object A —° B , called the linear exponent, and natural bijections (for all C ): 

Ai : C[C® A,B] -> C[C,A -o B], 

Notice that there are no accompanying additional coherence equations for monoidal closed cat- 
egories. This comes from the difference in nature between the constructions ® and — °: the latter 
is given together with a universal construction (an adjunction), while the first is just a functor with 
some associated isomorphisms. This difference is often referred to as the difference between "additional 
structure" (<g») and "property" (— °). The notion of dualizing object, due to Barr jS] and introduced 
next, is additional structure. 

Definition 7.6 A symmetric monoidal closed category C is called *-autonomous if it has a distin- 
guished object _!_, called a dualizing object, such that for any A the morphisms 

A / (A ; - 1 (*rf)o 7 ):C[A (A — o J_) — o J_] , 

called canonical, have an inverse. We write A 1 - for A — o _|_, and A for (j4 ) . 

Exercise 7.7 Let C be a ^-autonomous category. Show that: (1) there exists a natural bijection 
between C[A, B] and C[B , A ]; (2) there exists a natural isomorphism (A — o B) = A ® B ; (3) 
there exists a natural isomorphism 1 = _L . 

Part (3) of exercise 17.71 shows in retrospective that the name _L for the dualizing object is deserved: 
we can indeed understand it as the multiplicative false. 

Exercise 7.8 Suppose that C is a symmetric monoidal category, and that (_) : C op — » C is a functor 
given together with: (1) a natural isomorphism A = A^ 1 - : (2) a natural bijection C[J, (A B ) ] = 
C[A, B]. Show that C is monoidal closed, with — o defined by A — o B = (A® B ) . 

The last ingredient we need is the notion of comonad. 

Definition 7.9 A comonad over a category C is a triple (T, e, S) where T : C — > C is a functor, 
e : T — > idc, 5 : T — > T oT are natural transformations, and the following equations hold: 

e T A ° 5 a — idrA Te A ° $a = idrA $ta ° Sa — T5 A ° 5a , 

where e.g. 5a '■ TA — > T{TA) stands for the component of S at A. The following derived operation is 
useful. For all f : TA — > B, one constructs n(f) : TA — > TB as follows: 

K(f)=Tfo6. 

We define the co-Kleisli category Ct as follows. The objects of Ct are the objects ofC, and for any 
A, B: 

C T [A,B] = C[TA,B]. 
The identity morphisms are given by e, and composition o T is defined by: 

9°T f =go K {f). 
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Comonads are tightly linked with adjunctions, as the following exercises evidentiate. 

Exercise 7.10 Show that every adjunction (F,G,n,e), where F : C — ► C and G : C — ► C, induces 
a comonad (F o G,e,S) on C , where e is the counit of the adjunction, and where 6 — FrjG, i.e., 
5b = F(t]gb) (for all B). Show that the co-Kleisli category associated with the comonad is equivalent 
to the full subcategory of C whose objects are in the image of G. 

Exercise 7.11 Let (T,e,5) be a comonad over a category C. Show that the following data define 
adjoint functors F and U between C and Ct in such a way that T = FU : 

FA = \A Ff = n(f) UA = A Ug = g o e 

with id as unit and e as counit of the adjunction. 

We next follow [37| for a first attempt of interpretation of LL. We recall that a category C is 
cartesian if it has a terminal object T (i.e., such that for any A the homset C[A, T] has exactly 
one arrow Ta) and binary products (i.e., for every objects A, B there exists (A8zB,ir : A&.B —> 
A, it' : AhB — ► B) such that for all C, / : C — > A, and g : C — > B there exists a unique arrow 
(/, g) : C —> AhB such that tt o (/, g) = / and tt' o (/, g) = g; the product is then a functor, with 
/& 5 =(/o 7 r,/o 7r ')). 

Definition 7.12 ^4 Seely category is a structure consisting of the following data: (1) a ^--autonomous 
category C which is at the same time cartesian; (2) a comonad (!, e, 8) over C, called the exponential, 
together with two natural isomorphisms: 

n A . B : (\A) <8 (IB) =\(AkB) p : 1 =\T . 

Proposition 7.13 If C is a Seely category, then the associated co-Kleisli category C\ is cartesian. 

Proof. We take the product on objects and the pairing of arrows of C. As projections we take 7Ti o e 
and 7T2 o e. We check one commutation diagram: 

(ttiocJo, (/,/') = 7rio(eo ««/,/'») 

= TTiO (/,/') = /. □ 

Exercise 7.14 Show that if C is a Seely category, then the associated co-Kleisli category Ci is carte- 
sian closed (i.e., for any object A the functor XC.{ChA) has a right adjoint). 

Exercise 7.15 Let C be a ^-autonomous category which is at the same time cartesian, and which is 
equipped with a comonad (!, e, S) such that the associated Kleisli category Ci is cartesian closed. Show 
that there exists a natural isomorphism from (I A) (IB) to \(ASzB). 

Another implied structure is that each object of the form \A is endowed with the structure of a 
commutative comonoid: there are two arrows 

e : \A -> 1 d : \A -► (I A) (8 (IA) 

satisfying the three (categorical versions of the) comonoid laws (see exercise 17.170 . These arrows are 
constructed as follows: 

e = p _1 o!(T) o S d = n^ 1 o !((e, e)) o S . 

This definition may seem ad hoc, but it is actually derived from the underlying co-Kleisli adjunction 
(exercise 17. llf) and from the comonoid structure induced by the cartesian products of Ct (proposition 
17. 131 and exercise l7.16|) : e = o FT and d = n^ 1 o FA. 
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Exercise 7.16 Let C be a cartesian category. Let A = (id, id) : A — > ASzA. Show that A and Ta 
define a commutative comonoid structure, i.e., verify the equations of exercise 

Exercise 7.17 Let d and e be as just defined. Show that the following equations are satisfied: 

H o (e <S> id) o d — id i r o (id ® e) o d = id 

a o (id ® d) o d = (d®id)od 70 c? = d. 

We are now in a position to sketch the interpretation of the sequents of linear logic in a Seely 
category C. A proof of a sequent h A\, . . . , A n is interpreted by a morphism / : 1 — > (Ai*3 . . .*gA n ) 
(confusing the formulas with their interpretations as objects of C;), or (cf. exercise l7.7[) as a morphism 
from r to A, for any splitting A\ , . . . , A n = TU A. We shall freely go from one of these representations 
to another. The rules are interpreted as follows: 

(1) h 1 is interpreted by id : 1 — ► 1. 

(J_) Obvious, since _L is the dual of 1 (cf. exercise l7.7|l and since 10 1 = 1. 
(®) From / : T 1 - -> A and g : A 1 - -> B, we form / ® g : T x ® A- 1 -> ^4 ® _B. 
( > S > ) Obvious by associativity of > S ) . 
(Axiom) We simply take id : A ^ A. 
(Cut) Compose / : T 1 - — > A and g : A — >• A. 

(T) Interpreting h T,T amounts to giving an arrow from T 1 - to T. Since T is terminal, we take the 
unique such arrow. 

(&) The pairing of / : T 1 - -> A and g : T 1 - -> B yields (/, ,g) : r 1 - (A&S). 

(©) Given / : A — > T, we build / o tti : A^&B^ — > T, which we can consider as a morphism from 1 
to (A®B)>8T. 

(Dereliction) Given / : A — »• T, we build Joe : \(A ) — > T, where e is the first natural transformation 
of the comonad. 

(Promotion) Let / : 1 — > (yl. > S > ?£?l ! S , . . *g!B n ), which we can consider as an arrow from l(B^!k . . . &-B„ ) 
to A. Here we have made an essential use of the natural isomorphisms required in the definition of a 
Seely category. Then we can consider n(f) : !(S ] L & . . . fe-B^") -^>\A as a proof of \-\A, 1B±, . . . , lB n . 

( Weakening) For this case and the following one, we use the comonoid structure induced on \A. Let 
/ : 1 — ► I\ Then we can consider that foe — !(A- L ) — > T is a proof of \-?A, T. 

(Contraction) This case is similar to the case ( Weakening), replacing e by d. 

(Exchange) By associativity and commutativity. 

So far, so good. But is the interpretation invariant under cut-elimination, which is what we want 
of a model? The answer is: almost. We shall treat the contraction reduction in detail. Referring to 
section|3for notation, the proof n of h Ti, 1B X , 1B L is interpreted by, say, a morphism h :\B®\B — * C, 
where C interprets Ti, and the proof n' of \~7T2,B is interpreted by, say, a morphism g :\A — ► B, 
where A interprets T% , assuming for the time being that T2 is just one formula. Then the validation 
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of the contraction reduction amounts to the following commutativity equation: dso !j ° i5a = ((!(| ° 
Sa) ® (!# ° Sa)) ° <Ia, which is a consequence of the following two commutativity equations: 

d\A ° Sa = (Sa <8> 5a) o d,A (}-g® iff) ° d\A = dB°\g ■ 

These two equations are instances of the following more general statement: 

(P) V f :\A —>\A' (Sa' f = !/ Sa) (every free coalgebra morphism 
=>■ (cIa 1 / = (/ <K> /) ° (1a) is also a comonoid morphism) 

(A coalgebra over A is a morphism / : A — >!j4 and the free coalgebras are the coalgebras Sa over \A.) 
Indeed, 5 is a free coalgebra morphism, by the law S\a ° Sa = \S A ° Sa, and, for any g : A — > A 1 , \g is 
a free coalgebra morphism by naturality of 5. 

Property (P) cannot be derived from the sole axioms of Seely, as was noted by Benton, Bierman, 
Hyland and de Paiva |7j (for a survey and more references, see USD- Below, we show how to prove (P) 
assuming only one new equation (S l+ ) with respect to Seely's axiomatization. The reasoning could be 
carried out entirely in the category C, but it really arises via a tour into the co-Kleisli adjunction of 
the comonad ! (cf. exercise 17.110 . without which the equation (S + ) would seem ad hoc. 

The equation (S + ) asserts the naturality of n, between the two functors P_i CS> F-2 and P(_i&_2) 
from C,&C| to C, that is, for all / e C,[A, A'}, g 6 C\[B,B']: 

(S+) F{fkg)onA,B=n A >,B'°{Ff®Fg) 

or, in a form that only mentions C: 

(5+) ! < fo !tt, go !tt' > o 5 AhB o u a ,b = n A \B> ° ((!/ S A ) ® {\g ° 5 B j) ■ 

Now we show that (P) holds (we follow [21] [section 3.5]). We first remark that d can be reformulated 
as follows: 

d = nv AUA oFA UA 

= (cfua ® (fua) o (FriuA ®Fr] UA )o UA o PA UA (adjunction law) 
= {cfua ® cfc/a) o nyp^^^ o F{r) UA &r)uA) ° FA UA (by (5+)) 
= {cfua ® cj?im) ° yF£M o PA ufua ° P?7cm (A natural) 

As Fr/uA — S A , this gives us a handle to use the assumption of (P) in the proof of its conclusion: 
dA' ° f 

= (tFUA> ® £fM') ° ^£/FKA',i/F£/A' ° F A UFUA > o S A , o f 

= (cfua' ® e^c/A') ° "-t/Fc/A'.c/FC/A' ° fa ufua' oFUf oS A (assumption) 
= (efcm' ® £fuA' ) ° n ufua 1 , ufua' ° F(UfMJf) o FA UFUA ° S A (A natural) 
= (£fcm' <S> e FUA ') o (PC// ®FUf)o rT l J- FUAUFUA o FAufua ° <5a (by (5+)) 
= (/ ® /) ° (efka ® cfcm) ° n'uFUA, ufua ° -^A UFUA ° <5a (e natural) 

= {f®f)od A 

Now, we have to lift the restriction on the context T 2 . What happens if T 2 consists of two or more 
formulas, say, T 2 = ^4^, A^l Well, not a big deal, since \A X ® \A 2 is isomorphic to \(A 1 SzA 2 ), so we 
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can proceed as we did. Yes, but there are two distinct contraction rules in 



hr 1; ?^,?^ 

and hence the interpretation of the right hand side is, up to associativity and commutavity, ((!^o 
5a) ® (!<? ° $a)) ° {d-Ax <8> dA 2 ) and not {{\g o 5a) ® Off ° $a)) ° <^Ai&A 2 - We shall be done if we have 
dAx ® oIa 2 = oIaxUAq, up to associativity and commutativity. 

It remains to consider the case where 1?2 is empty. Then one still proceeds as we did, setting 
A = T, but at the price of introducing a useless d :!T — > !T(g> !T, which should be the identity up to 
the two canonical isomorphisms l\ o (p -1 ® !T) and l t o (!T ®p~ x ). 

Exercise 7.18 Formulate these equalities more precisely, and show that they are consequences of the 
following equations (taken from [26] [section 4-J) 

(S+) ™4&B,C ° (li,B® !C) ° Ct\A,\B,\C = ^A,B,C ° ° Q-A ® n B ,c) 

(5+) UB,A»7!A,!B= ! 7A,B 0)l iB 

(S+) (n) {A = \(n) A on TA o(p(g l \A) 

(5+) (i r )\ A =\{i r ) A on A .j o(\A®p) 

which use the fact that a cartesian category is a fortiori monoidal. 

Exercise 7.19 With the help of the same equations, show that the weakening reduction and the "box- 
box" reduction (I.e. a cut between two promotions \~1T\,1B , !C and \-lY2AB) are valid. Hint: For 
the latter, prove first that S o Ff — IF f o S, for any f :IA — > B. 

We have completed the definition of a categorical model of linear logic, which we wrap in the 
following definition. 

Definition 7.20 A Seely + category is a Seely category which moreover satisifes S + , (S^), (S^), 
(S+), and(S+). 

In more synthetic terms, this definition says that the functor F : C\ — > C is (strong) monoidal. 

We end the section by sketching the proof that the category Coh; of coherence spaces and linear 
functions forms a Seely + category. 

Proposition 7.21 The inclusion functor from Coh; to the category Coh of coherence spaces and 
stable functions has a left adjoint, and Coh; together with the comonad on Coh; induced by the 
adjunction yields a Seely category whose co-Kleisli category is equivalent to Coh. 

Proof. The adjunction is an immediate consequence of proposition 16 . 101 and exercise 16.111 For the 
symmetric monoidal structure, we just notice that at the level of events the canonical isomorphisms 
are given by: 

((e,e'),e") (e,(e',e")) (e,*)<-+e (*,e)«->e (e, e') (e', e) . 

There is a natural bijection Coh;[l,_E] = D(E), since (*,ei) 3 (*,G2) boils down to ei 3 Hence 
we have: 

Coh ; [1, (E <g> E'- 1 )- 1 } = D(E ® E'^) 
= D(E -o E') 

^ Coh; [£,£"] (cf. exercise EHJ . 
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Then the closed structure follows from exercise 17.81 

To see that Coh; is ^-autonomous, we set _L = 1^ (= 1), and we observe the trace of A;(A i _1 (id) o 
7) : A — » (A — o _L) -o _!_, which is {(e, ((e, *), *)) | e <E E}. It has as inverse the function whose trace 
is {(((e,*),*),e) I e 6 E}. 

That Coh is equivalent to the co-Kleisli category follows from exercise l7.1(JI We are left to verify 
the two natural isomorphisms. The first one holds by exercise 17.151 For the second one, notice that 
D(l) is a singleton. □ 

Exercise 7.22 Show that the transformations e and S associated with the comonad ! o C on Coh; are 
the following functions: 

e(X) = {e\{e}€X} 6(X) = {Y | [j Y e X} , 
and check that the coherent model satisfies the other axioms of Seely + categories. 
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